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We claim: 

1 . Apparatus comprising: 
an enclosure; 

first and second power supplies in the enclosure; 

first and second controller boards in the enclosure, each of the first and second 
controller boards having first and second serial bus controllers thereon; 

first and second serial buses, each of the first and second serial buses coupled to 
both of the first and second serial bus controllers on each of the first and second 
controller boards; 

the first serial bus coupled to the first power supply, the second serial bus coupled 
to the second power supply. 

15 2. The apparatus of claim 1 wherein the first and second serial buses are used for 
exchanging enclosure management and environmental information between the first and 
second power supplies and the first and second controller boards. 

3. The apparatus of claim 2 wherein the first and second power supplies provide 
20 status information to each other, and wherein status information related to the first power 
supply can be read from the second power supply via the serial bus to which the second 
power supply is coupled. 
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4. The apparatus of claim 3 wherein each of the first and second power supplies 
includes first and second blowers, and wherein status related to the first and second 
blowers is shared between the first and second power supplies. 

5. The apparatus of claim 4 wherein the status related to the first and second blowers 
in the first power supply can be read from the second power supply via the serial bus to 
which the second power supply is coupled. 

6. The apparatus of claim 5 wherein the enclosure resides in a storage system. 

7. A system comprising: 

a first module including first and second serial bus controllers; 

a first serial bus coupled to the first and second serial bus controllers; 

a second serial bus coupled to the first and second serial bus controllers; 

a second module coupled to the first and second serial buses; 

first and second isolation switches on the first module coupled to the first and 
second serial buses respectively; 

logic on the first module for causing the first and second isolation switches to 
open when either the first or second serial bus controller suffers a fault, such that the 
serial buses are isolated from the second module. 
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8. The system of claim 7 wherein the logic comprises: 

a watchdog timer coupled to the first and second serial bus controllers for 
monitoring the first and second serial bus controllers to ascertain whether the first or 
second serial bus controller suffers a fault; 
5 a flip flop coupled to the watchdog timer, the clock input of the flip-flop being 

driven by the watchdog timer such that when the watchdog timer ascertains that either the 
first or second serial bus controller has suffered a fault, the clock input of the flip-flop is 
asserted, causing an output of the flip-flop to be asserted; 

the output of the flip-flop coupled to the first and second isolation switches such 
10 that when the output of the flip-flop is asserted the first and second isolation switches 
open. 

9. The system of claim 8 wherein the output of the flip-flop holds its value so that, 
when the first and second isolation switches open, a cause can be determined as to why 

1 5 the first and second isolation switches opened. 

10. The system of claim 7 wherein the first and second isolation switches power up 
open. 

20 11. The system of claim 7 comprising: 

third and fourth serial bus controllers on the second module; 

20 



Patent Application 
EMC-03-037 
130/014 

Express Mail Label no. EV32972381 1US 
a third serial bus coupled to the third and fourth serial bus controllers and to the 
first isolation switches; 

a fourth serial bus coupled to the third and fourth serial bus controllers and to the 
second isolation switches; 
5 such that when the logic on the first module causes the first and second isolation 

switches to open, the third and fourth serial buses remain functional. 



12. The system of claim 1 1 comprising: 
10 third and fourth isolation switches on the second module coupled to the third and 

fourth serial buses respectively; 

the output of the third and fourth isolation switches coupled to outputs of the first 
and second isolation switches; 

logic on the second module for causing the third and fourth isolation switches to 
1 5 open when either the third or fourth serial bus controller suffers a fault, such that the first 
and second serial buses remain functional. 



13. The system of claim 12 wherein the logic on the second module comprises: 
a watchdog timer coupled to the third and fourth serial bus controllers for 
20 monitoring the third and fourth serial bus controllers to ascertain whether the third or 
fourth serial bus controller suffers a fault; 
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a flip flop coupled to the watchdog timer, the clock input of the flip-flop being 
driven by the watchdog timer such that when the watchdog timer ascertains that either the 
third or fourth serial bus controller has suffered a fault, the clock input of the flip-flop is 
asserted, causing an output of the flip-flop to be asserted; 
5 the output of the flip-flop coupled to the third and fourth isolation switches such 

that when the output of the flip-flop is asserted the third and fourth isolation switches 
open. 



10 



1 4. A module comprising: 

first and second serial bus controllers; 

a first serial bus coupled to the first and second serial bus controllers; 
15 a second serial bus coupled to the first and second serial bus controllers; 

first and second isolation switches coupled to the first and second serial buses 
respectively; 

logic for causing the first and second isolation switches to open when either the 
first or second serial bus controller suffers a fault, such that the serial buses are isolated 
20 from a second module to which the module can be coupled. 



15. A computer program product comprising: 
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first and second serial bus controllers; 

logic for monitoring first and second serial bus controllers; 

logic for controlling first and second isolation switches coupled to first and 
second serial buses respectively, the first and second serial buses being coupled to the 
5 first and second serial bus controllers, the logic for controlling causing the first and 
second isolation switches to open when either the first or second serial bus controller 
suffers a fault. 



10 16. A method comprising the steps of: 
providing an enclosure; 

providing first and second power supplies in the enclosure; 

providing first and second controller boards in the enclosure, each of the first and 
second controller boards having first and second serial bus controllers thereon; 
15 coupling First and second serial buses to both of the first and second serial bus controllers 
on each of the first and second controller boards; 

coupling the first serial bus to the first power supply, and coupling the second 
serial bus to the second power supply. 

20 17. The method of claim 16 including the step of exchanging enclosure management 
and environmental information between the first and second power supplies and the first 
and second controller boards via the first and second serial buses. 
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18. The method of claim 17 further comprising the step of reading status information 
related to the first power supply from the second power supply via the serial bus to which 
the second power supply is coupled. 

19. The method of claim 18 further comprising the steps of: 
providing first and second blowers in each of the first and second power supplies; 
exchanging status related to the first and second blowers between the first and 

second power supplies. 

20. The method of claim 19 further comprising the step of reading the status related to 
the first and second blowers in the first power supply from the second power supply via 
the serial bus to which the second power supply is coupled. 

15 21. A method comprising the steps of: 

providing a first module including first and second serial bus controllers; 

coupling a first serial bus to the first and second serial bus controllers; 

coupling a second serial bus to the first and second serial bus controllers; 

coupling a second module to the first and second serial buses; 
20 coupling first and second isolation switches on the first module to the first and 

second serial buses respectively; 
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causing the first and second isolation switches to open when either the first or 
second serial bus controller suffers a fault, such that the serial buses are isolated from the 
second module. 

22. The method of claim 21 wherein the step of causing comprises the steps of: 
monitoring by a watchdog timer the first and second serial bus controllers to 

ascertain whether the first or second serial bus controller suffers a fault; 

when the watchdog timer ascertains that either the first or second serial bus 
controller has suffered a fault, asserting by the watchdog timer the clock input of a flip- 
flop, causing an output of the flip-flop to be asserted; 

coupling the output of the flip-flop to the first and second isolation switches such 
that when the output of the flip-flop is asserted the first and second isolation switches 
open. 

23. The method of claim 22 wherein the output of the flip-flop holds its value and 
further comprising the step of determining why the first and second isolation switches 
opened by examining the output of the flip-flop. 

24. The system of claim 21 wherein the first and second isolation switches power up 
open. 

25. The method of claim 21 further comprising the steps of: 
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providing third and fourth serial bus controllers on the second module; 
coupling a third serial bus to the third and fourth serial bus controllers and to the 
first isolation switches; 

coupling a fourth serial bus to the third and fourth serial bus controllers and to the 
5 second isolation switches, such that when the logic on the first module causes the first 
and second isolation switches to open, the third and fourth serial buses remain functional. 

26. The method of claim 25 further comprising the steps of: 

coupling third and fourth isolation switches on the second module to the third and 
10 fourth serial buses respectively; 

coupling outputs of the third and fourth isolation switches to outputs of the first 
and second isolation switches; 

causing the third and fourth isolation switches to open when either the third or 
fourth serial bus controller suffers a fault, such that the first and second serial buses 
1 5 remain functional. 

27. The method of claim 26 wherein the step of causing comprises the steps of: 
monitoring by a watchdog timer the third and fourth serial bus controllers to 

20 ascertain whether the third or fourth serial bus controller suffers a fault; 
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when the watchdog timer ascertains that either the third or fourth serial bus 
controller has suffered a fault, asserting by the watchdog timer the clock input of a flip- 
flop, causing an output of the flip-flop to be asserted; 

coupling the output of the flip-flop to the third and fourth isolation switches such 
that when the output of the flip-flop is asserted the third and fourth isolation switches 
open. 

28. A method comprising the steps of: 

providing first and second serial bus controllers; 

coupling a first serial bus to the first and second serial bus controllers; 

coupling a second serial bus to the first and second serial bus controllers; 

coupling first and second isolation switches the first and second serial buses 
respectively; 

causing the first and second isolation switches to open when either the first or 
second serial bus controller suffers a fault, such that the serial buses are isolated from a 
second module to which the module can be coupled. 
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